ISC Patches Critical DoS Vulnerability in BIND

A critical, remotely exploitable bug in some BIND domain name system DNS servers could cause a denial of service situation and trigger them to crash. The defect lies in the extension mechanisms for DNS EDNS specification, the Internet Systems Consortium, which performs upkeep on the system,...

CVE-2014-3859

libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via a crafted packet, as demonstrated by an attack against named, dig, or delv...

CVE-2014-3859

libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via a crafted packet, as demonstrated by an attack against named, dig, or delv...

CVE-2014-3859

CVE-2014-3859 affects ISC BIND 9.x where EDNS option processing is vulnerable to a crafted packet causing an assertion failure and daemon exit, resulting in a denial of service. Concrete references across multiple vendors/inputs confirm exposure in BIND 9.10.0 before P2 and related 9.x releases, ...

openSUSE Security Update : bind (openSUSE-SU-2012:0971-1)

bind was updated to fix a remote denial of service crash problem in high load DNSSEC scenarious. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-493. The text description of this...

openSUSE Security Update : bind (openSUSE-SU-2011:0135-1)

This bind update fixes a remote denial of service vulnerability that can be triggered using an IXFR or DDNS update. CVE-2011-0414: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : bind (openSUSE-SU-2011:0788-1)

A remote Denial of Service vulnerability has been fixed in bind. Specially crafted packets could cause bind servers recursive as well as authoritative to exit. CVE-2011-2464 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

openSUSE Security Update : bind (openSUSE-SU-2012:0722-1)

A remote denial of service in the bind nameserver via zero length rdata fields was fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-316. The text description of this plugin...

openSUSE Security Update : bind (openSUSE-SU-2011:0788-1)

A remote Denial of Service vulnerability has been fixed in bind. Specially crafted packets could cause bind servers recursive as well as authoritative to exit. CVE-2011-2464 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

openSUSE Security Update : bind (openSUSE-2011-13)

Cache lookup could return RRSIG data associated with nonexistent records, leading to an assertion failure. bnc730995 CVE-2011-4313 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : bind (openSUSE-SU-2011:1272-1)

specially crafted DNS queries could crash the bind name server CVE-2011-4313. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update bind-5441. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : bind (openSUSE-SU-2014:0199-1)

Update to version 9.9.4P2 - Fixes named crash when handling malformed NSEC3-signed zones CVE-2014-0591, bnc858639 - Obsoletes workaround-compile-problem.diff - Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now supported upstream --enable-rrl. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : bind (openSUSE-2013-297)

bind was updated to 9.9.2-P2, fixing a security issue in regular expression handling. CVE-2013-2266 RT 32688 https://kb.isc.org/article/AA-00871 bnc811876 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : bind (openSUSE-SU-2010:0917-1)

A DoS vulnerability in bind's DNSSEC code has been fixed which occured while recursively validating a server. CVE-2010-0213 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : dhcp (openSUSE-SU-2013:0620-1)

ISC DHCP was updated to ISC dhcp-4.2.5-P1 release, which contains updated bind-9.8.4-P2 sources with removed regex.h check in configure bnc811934, CVE-2013-2266. Also: Changed spec make the bind export library build output visible. Added dhcp6-server service template for SuSEfirewall2 bnc783002...

openSUSE Security Update : bind (openSUSE-SU-2010:1031-1)

Adding certain types of signed negative responses to cache doesn't clear any matching RRSIG records already in cache. A subsequent lookup of the cached data can cause named to crash CVE-2010-3613. bind did not properly determine the security status of an NS RRset during a DNSKEY algorithm rollove...

openSUSE Security Update : bind (openSUSE-SU-2012:1649-1)

bind received updates to fix bugs and security issues. On openSUSE 12.2, bind was updated to 9.9.2-P1. On openSUSE 12.1, bind was updated to 9.8.4-P1. Main security fix: CVE-2012-5688: Prevents named from aborting with a require assertion failure on servers with DNS64 enabled. These crashes might...

openSUSE Security Update : bind (openSUSE-SU-2011:0603-1)

This update provides bind 9.7.3P1 which fixes a denial of service issue in RRsig RRSET handling. CVE-2011-1910 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update bind-4633. The text description o...

openSUSE Security Update : bind (openSUSE-SU-2012:1372-1)

The bind nameserver was updated to fix specially crafted DNS data can cause a lockup in named. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-716. The text description of this...

openSUSE Security Update : bind (openSUSE-SU-2012:0969-1)

Bind was updated to fix a denial of service crash during heavy DNSSEC validation load that can cause a 'Bad Cache' assertion failure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...